The Gauge Said Safe

Seventeen men trusted a number on a panel. The number had been lying to them for three weeks. Today we walk back through a Houston Ship Channel night that rewrote the process-safety rulebook — then we get you ready for the heat and the hole in the ground that are killing people right now.

Thirty-six years ago this week, a little before midnight on the Houston Ship Channel, a crew went to restart a compressor they’d started a hundred times before. A gauge on the tank told them the air inside was safe. That gauge had been dead since June 15.

(It didn’t land on July 1 — it landed four days later, same week, 1990. The lesson doesn’t care about the calendar.)

The ARCO Chemical plant in Channelview was the biggest producer of the gasoline additive MTBE on the planet. Out on the northwest edge, in a quiet utility corner, sat a 900,000-gallon steel tank holding wastewater off the plant’s processes. That water carried hydrocarbons — and hydrocarbons breathe. They fill the empty space at the top of a tank with vapor. Vapor, plus oxygen, plus one spark, is a bomb waiting on a reason.

So the tank had two guards. An oxygen analyzer watched the air inside. A nitrogen sweep flushed that space with inert gas to keep the oxygen too low to burn. A troublesome compressor moved the vapor off to a scrubber — a compressor that had been down for 41 percent of the year.

In late June, that compressor quit for good, and crews pulled it to rebuild. What nobody saw: on June 15, the oxygen analyzer had failed too — and it failed the worst way a gauge can fail. It kept reading safe while the oxygen inside climbed. For three weeks the panel said everything was fine. It was not.

On July 4, workers shut the nitrogen sweep off to modify some piping and clean the tank — but only after the analyzer showed safe oxygen. They trusted the number, because trusting the number is what a gauge is for. The next night, 11:21 p.m., a crew moved in to restart the rebuilt compressor. The vapor space was now a fuel-and-air mix waiting on an ignition. The restart handed it one.

The blast crushed the tank like a soda can in a vise. It tore the 48,000-pound lid off and threw it 200 yards into a parking lot — two football fields. It launched a second tank into a pipe rack. The fireball climbed 100 feet over the channel and people felt it 8 miles away. Seventeen men were killed: five ARCO employees, eleven contractors from Austin Industrial, and a vacuum-truck driver there to help with the maintenance. Five more were hurt.

OSHA’s investigators pieced it together — the analyzer dead since June 15, the nitrogen backed off, the oxygen climbing for weeks, a routine restart lighting the whole thing. The agency hit ARCO with a $3.48 million fine — the largest in OSHA’s history at that time — for more than 300 violations, and forced the company to overhaul safety at every one of its U.S. plants.

The rule it shaped: 29 CFR 1910.119 — Process Safety Management. The disasters of those years — Phillips in Pasadena in ‘89, ARCO here in ‘90 — are the wreckage OSHA had in front of it when it finalized PSM in 1992. Two pieces of it are written straight out of this tank. Mechanical integrity — 1910.119(j) — means your safety-critical instruments get tested and maintained, so a gauge that dies on June 15 gets caught before July 5. Management of change — 1910.119(l) — means you don’t pull a compressor, kill a nitrogen sweep, and start venting to the sky without somebody asking, on paper: what did we just take away, and what’s protecting these people now?

Here’s the part that matters. Those seventeen men were not careless. They read the gauge and believed it — the same way you believe the fuel gauge in your truck. The system gave them one number, no second way to check it, and then stood them next to a tank full of fuel. A normal instinct — trust the instrument — turned one silent failure into seventeen funerals. The rule is the rulebook written in those men’s names. Build the barriers — a second check, a real atmospheric test, a change process with a signature on it — so the instinct never gets the chance to kill anybody.

1. OSHA’s Heat program is live for the whole summer — and there’s still no federal heat rule. On April 10, OSHA updated its National Emphasis Program for indoor and outdoor heat, pointing inspectors at 55 high-risk industries using injury data from 2022–2025. It’s effective now and runs five years. Read the fine print: on any day the National Weather Service posts a heat advisory or warning, compliance officers can run random heat inspections in those industries — and expand any inspection where they spot heat hazards. The proposed federal heat standard is still stuck in rulemaking, so OSHA cites heat the only way it can right now — the General Duty Clause, Section 5(a)(1).

So what for you: you don’t get to wait for the standard to drop. On a heat-advisory day, you’re a target — and more important, your people are exposed. Have water, rest, shade, and a written acclimatization plan in place before the inspector, or the ambulance, shows up.

2. Trench Safety Stand Down just wrapped — because the ground is still winning. The National Utility Contractors Association ran its national Trench Safety Stand Down June 15–19, and OSHA got behind it hard. The agency’s message is blunt: “a trench collapse can happen in seconds,” and workers die every year from hazards we know cold.

So what for you: summer is digging season. OSHA’s own line — a cubic yard of dirt can weigh 3,000 pounds, a car’s worth, and it buries a man before he can stand up. Anything five feet deep or more needs a protective system: slope it, shore it, or shield it (29 CFR 1926 Subpart P). Put a competent person on site, and inspect that trench before every shift and again after every rain.

A mechanic needs to get under the raised bed of a machine — a platen, a ram, a dump bed, whatever your plant runs — held up in the air by hydraulics. He kills the power at the disconnect and climbs under. Power’s off, so the danger’s off: that’s the logic, and it’s the logic almost everybody runs on. But hydraulics don’t need power to come down. A little seep past a valve, a bumped lever, and gravity does the rest. The bed drifts down, slow and quiet, and stops two inches off his chest — caught on a toolbox he’d left on the frame by luck, not by plan.

Nobody wrote him up, and that’s right, because the write-up was never the lesson. The lesson is this: “power off” and “energy gone” are two different things. A cylinder holding a ton over your head is loaded whether the panel reads off or not — same as that ARCO tank read safe while it filled with fuel. Lockout/tagout — 29 CFR 1910.147 — doesn’t stop at flipping the disconnect. It says you release or block the stored energy — the hydraulic pressure, the raised weight, the coiled spring, the charged capacitor — before any part of a body goes into the zone. Set the blocks. Every time.

Got a fail or a near-miss? Hit reply. We’ll feature it anonymously — no names, no company, no blame. Just the lesson, so the next crew doesn’t learn it the hard way.

If you’ve got someone new working heat this week — a new hire, somebody back from two weeks off, a guy just moved over from nights — do not drop them into a full day of heat load on day one. Their body hasn’t built its defenses yet, and that’s exactly who the heat kills: a large share of heat fatalities hit workers in their first few days on the job.

Use OSHA’s Rule of 20%: on a new worker’s first day in the heat, no more than 20% of the normal workload at full intensity, then add no more than 20% more each day after. Water. Rest. Shade. And a lighter first week. That’s the whole thing — and it’s the cheapest life you’ll save all year.

Please stay Safe & Hydrated!!!